59d979311cc1e6fadba3ce6c406e77b88c597715b4084575f349c6ff3369b6a7

Analysis

max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 15:00

Target
2026-09-24_0ee01066478d225dc49641ddbe1d1ba2_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 927KB
Sample260925-sdkvasydnf
SHA256 59d979311cc1e6fadba3ce6c406e77b88c597715b4084575f349c6ff3369b6a7
MD5 0ee01066478d225dc49641ddbe1d1ba2
SHA1 7e5df3a6c09b59abd7d774243bcf65d54ccaf691
SHA512 2d388826fc52980a8f0de7fe4f0a987a54d3e4c5a5691958b28cb50240660847320eb8fe9a820a1d3760fef538cf8bc5f79c1618156533b27bd5d01815c82abc
SSDEEP 24576:iD5TvinrmdocjmtLaok0Le5ji0hmxNrM:k56rwPji0Aj
TLSH
T15E151816F6684F65D07FC0B9C5D2569AEA733C425F3087CB02559E283F276D29A3A323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
312	2026-09-24_0ee01066478d225dc49641ddbe1d1ba2_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
312	2026-09-24_0ee01066478d225dc49641ddbe1d1ba2_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-24_0ee01066478d225dc49641ddbe1d1ba2_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-24_0ee01066478d225dc49641ddbe1d1ba2_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:312